Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: Txadg/F1yskrFKm6c4sqg1fujUOZs6ltJwHqL/qVI5k=
Subject key identifier: 25:06:98:60:41:A2:1C:5A:2F:B8:6B:D5:79:00:24:64:34:D9:85:86
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 019D2B175A28B72EB3B3B0D1390F943D8178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 17:00:43 +0000
Manifest this update: Thu 26 Mar 2026 17:00:43 +0000
Manifest next update: Fri 27 Mar 2026 17:00:43 +0000
Files and hashes: 1: 1-NYp-ANDJGWn2zBa6tZxxYGdDfA.roa (hash: ACBt4zT2KY2CKqY2w+FWy0192eghSargg1ySIXwb63Y=)
2: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: cJSNrnEBuFyG1lIVZpGq0+nsFnB/7rBp7eZlranJiZw=)
3: gGTUtih5jVa-QbWTlOxD1xFHxEM.roa (hash: V1056kAulKAWgU4sgdguF4s6mRxgfRsvQzLGzFRcugQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:5a:28:b7:2e:b3:b3:b0:d1:39:0f:94:3d:81:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Mar 26 17:00:43 2026 GMT
Not After : Mar 27 17:00:43 2026 GMT
Subject: CN=2506986041a21c5a2fb86bd57900246434d98586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:70:da:40:0f:d4:c2:c8:fe:41:15:3c:a1:
63:db:40:5c:97:77:a3:8b:19:8f:70:b7:80:bf:25:
cf:c6:4a:68:6e:d8:d0:39:6e:07:bb:77:28:ae:14:
b8:2c:07:ac:e0:bf:c0:24:6a:a3:b9:fb:ec:1d:4b:
f7:2a:07:52:0e:06:2c:ff:cd:93:c1:4c:27:df:00:
13:62:ae:f5:3c:c1:2d:ca:ee:b0:01:d7:f5:21:9f:
32:65:99:12:e7:7e:06:bf:b4:ce:a9:8c:8a:53:9e:
ed:92:c8:88:80:f5:c9:53:2f:4d:a1:05:5a:b7:7a:
9a:ac:cb:2d:5e:d5:67:1a:0c:7b:c2:58:21:55:26:
59:b8:9c:18:6a:ad:52:67:48:7f:5b:70:67:9c:10:
2a:2b:7b:59:57:d5:75:3b:23:2e:f1:88:e3:13:34:
9e:9a:d8:ff:d1:d7:b6:80:f3:74:a9:55:70:56:cd:
3e:26:a1:f0:da:ee:20:15:9d:09:fd:ec:ca:b7:a3:
2f:52:43:12:4f:a9:a2:88:4f:d0:52:42:07:b5:1e:
51:f3:54:69:b3:a4:d1:23:a6:cb:9c:19:af:5c:2b:
da:8c:3c:6e:e4:a9:6f:b5:ea:2c:fa:73:69:fe:9b:
b0:4b:a7:dd:79:93:d2:5f:bd:25:21:e6:22:ee:27:
04:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:06:98:60:41:A2:1C:5A:2F:B8:6B:D5:79:00:24:64:34:D9:85:86
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f8:5c:c5:6d:97:64:c9:c9:28:ea:3a:57:81:e9:82:ae:d8:
e2:b1:0b:d3:f9:8d:a7:db:34:7d:be:ba:1e:91:b0:0e:e9:fc:
1a:c0:e8:75:20:42:ed:52:29:47:83:81:0f:4b:02:88:57:df:
e4:71:ce:da:9d:da:ff:da:92:0c:01:f8:c5:9e:7e:3d:44:93:
f1:4b:d5:77:67:c8:31:fd:b4:9c:f3:87:62:52:8f:32:e4:fb:
fe:63:59:ca:a3:d0:ef:63:11:cc:db:35:6a:e4:c5:09:ea:16:
57:c6:cf:52:8f:e4:47:f7:84:a9:b7:41:e7:48:5b:81:a8:67:
e2:a3:8f:59:3b:d0:88:0e:41:61:01:54:c6:10:bc:b4:42:eb:
7d:a6:f7:88:d4:c0:2a:ad:3c:3f:fc:bb:8c:fd:b3:28:01:d4:
eb:d4:5b:d9:55:41:ea:06:89:d4:f7:b2:a6:19:64:bc:a4:72:
fb:0d:c5:f4:26:63:0e:24:5b:2f:ee:24:ba:1b:3a:80:ae:e5:
6f:77:51:64:22:79:d4:9e:77:fa:8d:42:a4:6b:f5:ac:9b:ef:
22:e1:6b:6c:fa:66:c3:25:06:0a:4a:d4:9d:31:97:7c:d1:ce:
0e:f9:85:fc:30:14:9e:5a:e3:2a:71:73:ad:84:aa:cb:c8:9b:
49:03:1b:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rF1ooty6zs7DROQ+UPYF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZjM5ZDJmMjBlMmQ5YjRmOTZjYmQxMzM3ZWEzMmRhNTE4
ZDhlYzgwHhcNMjYwMzI2MTcwMDQzWhcNMjYwMzI3MTcwMDQzWjAzMTEwLwYDVQQD
EygyNTA2OTg2MDQxYTIxYzVhMmZiODZiZDU3OTAwMjQ2NDM0ZDk4NTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRBw2kAP1MLI/kEVPKFj20Bcl3ej
ixmPcLeAvyXPxkpobtjQOW4Hu3corhS4LAes4L/AJGqjufvsHUv3KgdSDgYs/82T
wUwn3wATYq71PMEtyu6wAdf1IZ8yZZkS534Gv7TOqYyKU57tksiIgPXJUy9NoQVa
t3qarMstXtVnGgx7wlghVSZZuJwYaq1SZ0h/W3BnnBAqK3tZV9V1OyMu8YjjEzSe
mtj/0de2gPN0qVVwVs0+JqHw2u4gFZ0J/ezKt6MvUkMST6miiE/QUkIHtR5R81Rp
s6TRI6bLnBmvXCvajDxu5Klvteos+nNp/puwS6fdeZPSX70lIeYi7icEEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUGmGBBohxaL7hr1XkAJGQ02YWGMB8GA1UdIwQY
MBaAFFPznS8g4tm0+Wy9EzfqMtpRjY7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xZDhmY2EtYjQ2Mi00MzEzLWE1MjMt
ZTQxMWI0M2RjNjhhLzEvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xZDhmY2EtYjQ2Mi00MzEzLWE1MjMtZTQxMWI0M2RjNjhh
LzEvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPhcxW2X
ZMnJKOo6V4Hpgq7Y4rEL0/mNp9s0fb66HpGwDun8GsDodSBC7VIpR4OBD0sCiFff
5HHO2p3a/9qSDAH4xZ5+PUST8UvVd2fIMf20nPOHYlKPMuT7/mNZyqPQ72MRzNs1
auTFCeoWV8bPUo/kR/eEqbdB50hbgahn4qOPWTvQiA5BYQFUxhC8tELrfab3iNTA
Kq08P/y7jP2zKAHU69Rb2VVB6gaJ1PeyphlkvKRy+w3F9CZjDiRbL+4kuhs6gK7l
b3dRZCJ51J53+o1CpGv1rJvvIuFrbPpmwyUGCkrUnTGXfNHODvmF/DAUnlrjKnFz
rYSqy8ibSQMbGA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:26:23 2026 by rpki-client